CVE-2011-2600

no score yetEPSS 12%

microsoft windows xp: no CVSS score yet. EPSS 12% chance of exploitation in the next 30 days.

The GPU support functionality in Windows XP does not properly restrict rendering time, which allows remote attackers to cause a denial of service (system crash) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry, as demonstrated by using Mozilla Firefox or Google Chrome to visit the lots-of-polys-example.html test page in the Khronos WebGL SDK.

EPSS: 12% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2011-06-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_xp

References

http://www.contextis.com/resources/blog/webgl/
http://www.contextis.com/resources/blog/webgl/

Check your stack JSON